Was hoping to get some feedback on what everyone feels are best
practices around securing iFrames. I've seen a lot of payment platforms
moving in this direction (ie. Gumroad, Stripe, Memberful) yet with
little documentation around "here is the best way to secure the iFrame
our JavaScript genera

I've just released a new tool, HTTP Traceroute. This tool takes a URL
and follows any redirects from it till it reaches the end of the line.
At each stage it it shows all headers, cookies, warns about long
bodies and bad SSL certificates.

Apologies for complete self interest where the list admin (me) pushes
a personal interest (OWASP). However, I believe the Open Web
Application Security Project is on topic for the web application
security mail list, and I wouldn't normally do it (you can check -
I've been moderator since

Hi All,
Xenotix provides Zero False Positive XSS Detection by
performing the Scan within the browser engines where in real world,
payloads get reflected. Xenotix Scanner Module is incorporated with 3
intelligent fuzzers to reduce the scan time and produce better
results. If you really don't

Running assets is always difficult, however this year has been excruciating for t2 infosec. We lost one of our most prized and well placed deep cover operatives in a foreign three letter agency. Shortly after the CFP, communications stopped and we have to assume her new assignment is a permanent pla

International Journal of Distributed Sensor Networks (Impact factor: 0.727)
*Special Issue on Research Advances in Security and Privacy for Smart
Cities*
Online version of CFP: http://www.hindawi.com/journals/ijdsn/si/239803/cfp/

Do you feel like Las Vegas is too hot, Berlin too bohÃ¨me, Miami too humid, Singapore too clean and Pattaya just totally confusing ? No worries! Helsinki will be the perfect match for you â?? guaranteed low temperature, high